$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft File: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft (raw, json) Hash identifier: lGBzA36/at0DV1oiPG0CP56tVuiDiW6r+6s52hSFmfk= Subject key identifier: 57:9F:DC:CF:C3:AD:05:DA:13:2C:23:51:23:F9:90:46:87:BE:09:F4 Authority key identifier: 4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26 Certificate issuer: /CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526 Certificate serial: 49540699EA0BB4D11AEE3901B86D1FC2BF232E4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 12:23:27 +0000 Manifest this update: Mon 02 Nov 2026 12:18:27 +0000 Manifest next update: Tue 03 Nov 2026 12:46:27 +0000 Files and hashes: 1: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: crz5wQlV27LIwISEyXo4hYXR+StXchnW3rusJFfd1fY=) 2: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl (hash: kfwVE8+ENLBZPtH+k4+ipHz4EgHoMlcNqnMHFMPYDuQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:54:06:99:ea:0b:b4:d1:1a:ee:39:01:b8:6d:1f:c2:bf:23:2e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526 Validity Not Before: Nov 2 12:18:27 2026 GMT Not After : Nov 3 12:46:27 2026 GMT Subject: CN=579FDCCFC3AD05DA132C235123F9904687BE09F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:74:53:6c:9c:7d:b8:24:de:38:01:1e:b1:80: 03:21:4e:2d:50:5e:9c:29:95:aa:26:8b:88:8d:42: 63:69:e5:69:01:5a:1f:36:a8:de:f8:5f:1a:25:f5: f3:0f:4f:58:18:b1:48:2a:81:81:a6:35:47:f6:a8: b2:18:d5:33:cd:06:f3:5e:c2:17:43:bf:b0:2f:f4: be:0d:2b:b7:f6:8c:21:8c:97:f7:50:57:b4:6c:dd: 89:f4:ca:14:29:b8:b6:28:35:4a:eb:ad:73:2d:cc: 7a:f0:5c:27:c9:94:d0:21:89:13:2c:2f:1d:d2:94: 51:be:b0:34:b5:0f:b6:0a:bd:28:fc:06:32:e4:00: a7:06:50:14:d6:77:9c:c3:c3:88:dc:b1:9b:d2:46: 6c:fb:71:4f:66:24:0e:4e:90:b0:98:e9:c4:c6:e7: eb:f1:8a:4a:12:9f:e0:fa:84:a7:da:29:4f:3e:e7: 34:8d:09:be:4b:7e:30:8f:99:5b:76:4d:7e:56:8f: c3:93:61:ab:f2:b0:fa:d2:1a:31:fe:89:89:e4:e2: ab:81:09:5f:0d:22:b5:b8:e3:6e:cd:c1:4b:6f:9c: 23:95:cf:4c:50:a8:c3:07:a9:b7:b6:d3:65:9b:f6: 9c:89:b4:b9:ee:24:ca:6f:cf:81:e7:f1:01:af:f9: 0f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9F:DC:CF:C3:AD:05:DA:13:2C:23:51:23:F9:90:46:87:BE:09:F4 X509v3 Authority Key Identifier: keyid:4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:07:c2:c2:d4:aa:07:1f:72:ef:bb:98:50:e5:44:0a:8d:1f: 45:23:1a:ef:c5:81:24:60:25:c5:52:91:a9:84:c9:00:19:ea: a0:d1:9c:e0:5a:21:7c:94:9f:bc:0b:ed:95:7c:ea:8e:fe:a9: 4a:c0:c5:cc:d0:76:96:8c:2e:b4:b8:5a:44:02:2f:0f:11:59: 14:6c:e8:07:e1:5b:2d:57:a0:48:25:5f:4d:ba:f5:4b:52:a2: fe:c9:7b:0b:28:91:a9:71:66:3e:ba:3c:84:d8:1f:76:2b:4e: 15:de:80:db:51:db:31:df:b8:40:91:71:0a:4d:72:d8:04:b4: 12:c6:7e:58:13:0d:ac:60:da:e7:d6:64:7e:53:23:92:e9:45: 87:f2:ec:93:18:10:fd:e1:08:c2:79:a1:71:31:e5:d2:e9:ef: 82:5e:82:ad:e1:73:43:52:df:bc:45:b1:91:6b:d5:e8:e7:b1: e4:29:3a:c3:79:8e:aa:3a:6c:ff:6d:53:b1:e3:9b:1b:d8:21: b1:cd:35:8f:9d:9a:f8:cb:37:17:45:5f:1c:c6:d5:68:e9:0e: af:39:89:c0:a2:9f:4f:ab:6c:3d:aa:27:41:b5:e5:1a:3a:19: 1b:52:76:74:22:e3:be:5e:48:84:20:92:19:a7:21:00:ef:d4: 78:ed:d0:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVQGmeoLtNEa7jkBuG0fwr8jLkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQzNjhENjBFQUUyQjcyMThFOUM1MjI0NjVERkRBRDdE MkRENzUyNjAeFw0yNjExMDIxMjE4MjdaFw0yNjExMDMxMjQ2MjdaMDMxMTAvBgNV BAMTKDU3OUZEQ0NGQzNBRDA1REExMzJDMjM1MTIzRjk5MDQ2ODdCRTA5RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEdFNsnH24JN44AR6xgAMhTi1Q Xpwplaomi4iNQmNp5WkBWh82qN74Xxol9fMPT1gYsUgqgYGmNUf2qLIY1TPNBvNe whdDv7Av9L4NK7f2jCGMl/dQV7Rs3Yn0yhQpuLYoNUrrrXMtzHrwXCfJlNAhiRMs Lx3SlFG+sDS1D7YKvSj8BjLkAKcGUBTWd5zDw4jcsZvSRmz7cU9mJA5OkLCY6cTG 5+vxikoSn+D6hKfaKU8+5zSNCb5LfjCPmVt2TX5Wj8OTYavysPrSGjH+iYnk4quB CV8NIrW4427NwUtvnCOVz0xQqMMHqbe202Wb9pyJtLnuJMpvz4Hn8QGv+Q+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV5/cz8OtBdoTLCNRI/mQRoe+CfQwHwYDVR0j BBgwFoAUTTaNYOrityGOnFIkZd/a19LddSYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MDkwNDQtNTcxOC00ZjFkLWE2ZDAtODc2NmVhNzNlYWY0LzAvNEQzNjhENjBF QUUyQjcyMThFOUM1MjI0NjVERkRBRDdEMkRENzUyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDM2OEQ2MEVBRTJCNzIxOEU5QzUyMjQ2NURGREFEN0QyREQ3 NTI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvNEQzNjhENjBFQUUyQjcyMThFOUM1MjI0NjVERkRB RDdEMkRENzUyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYHwsLUqgcfcu+7mFDlRAqNH0UjGu/FgSRg JcVSkamEyQAZ6qDRnOBaIXyUn7wL7ZV86o7+qUrAxczQdpaMLrS4WkQCLw8RWRRs 6AfhWy1XoEglX0269UtSov7JewsokalxZj66PITYH3YrThXegNtR2zHfuECRcQpN ctgEtBLGflgTDaxg2ufWZH5TI5LpRYfy7JMYEP3hCMJ5oXEx5dLp74Jegq3hc0NS 37xFsZFr1ejnseQpOsN5jqo6bP9tU7HjmxvYIbHNNY+dmvjLNxdFXxzG1WjpDq85 icCin0+rbD2qJ0G15Ro6GRtSdnQi475eSIQgkhmnIQDv1Hjt0Fc= -----END CERTIFICATE-----Generated at Mon Nov 2 17:22:11 2026 by rpki-client